CVE-2022-30754

Summary: CVE-2022-30754 describes an implicit intent hijacking vulnerability in Samsung AppLinker. The issue allows an attacker to launch certain activities with the privileges of AppLinker due to insufficient restrictions on implicit intents. Affected component: Samsung AppLinker (on Samsung mob...

CVE-2022-32623

CVE-2022-32623 concerns the mdp component, with an out-of-bounds write caused by incorrect error handling. The issue can enable local escalation of privilege with system execution privileges required, and does not require user interaction to exploit. The patch reference provided is ALPS07342114 (...

CVE-2022-32640

CVE-2022-32640 concerns MediaTek Meta WiFi with an out-of-bounds write caused by a missing bounds check. The vulnerability enables local privilege escalation with SYSTEM level execution privileges required; no user interaction is needed. Connected documents confirm affected component is Meta WiFi...

CVE-2022-33689

The CVE-2022-33689 entry concerns Samsung TelephonyUI with an improper access control issue. Affected software: TelephonyUI prior to the SMR July 2022 Release 1. Root cause: lack of proper permission checks allows an unprotected binder call to change the device’s preferred network type. Impact: a...

CVE-2022-33694

CVE-2022-33694 is an exposure of sensitive information in the Samsung CSC application on Samsung Mobile devices. The root issue is disclosure of wifi information through unprotected intent broadcasting within the CSC app prior to the SMR July 2022 release 1. The vulnerability permits a local atta...

CVE-2022-33704

CVE-2022-33704 concerns an improper validation in KnoxSDK’s ucmRetParcelable prior to Samsung’s SMR Jul-2022 Release 1. The root cause is input validation failure in that function, which could allow an attacker to launch certain activities. Documents indicate remediation via Samsung’s Security Ma...

CVE-2022-36854

The CVE-2022-36854 issue affects the library libapexjni.media.samsung.so (Samsung), with an out-of-bounds read that could allow an attacker to access unauthorized information. Connected documents consistently identify the vulnerable component as libapexjni.media.samsung.so and cite the root cause...

CVE-2022-36860

The CVE-2022-36860 entry concerns a heap-based overflow in the LoadEnvironment function of the libSDKRecognitionText.spensdk.samsung.so library. Affected component: libSDKRecognitionText.spensdk.samsung.so; vulnerability type: heap-based overflow in LoadEnvironment; root cause: memory access faul...

CVE-2022-39107

CVE-2022-39107 affects the Soundrecorder service (UNISOC-based devices per CNNVD/Red Hat lists) and is caused by a missing permission check, enabling local privilege escalation with low privileges and no user interaction. The NVD/PRION/CNNVD entries describe elevation of privilege without requiri...

CVE-2022-39123

CVE-2022-39123 describes a potential out-of-bounds write in the sensor driver due to a missing bounds check, which could lead to local denial of service in the kernel. The public documents consistently state this issue but do not provide concrete exploitation details, affected product versions, o...

CVE-2022-39897

The CVE-2022-39897 issue affects Samsung Kernel prior to SMR Dec-2022 Release 1, enabling an attacker with local access to leak kernel address information via system logs, i.e., an information disclosure vulnerability. Documented impact: kernel address data exposure with impact on confidentiality...

CVE-2022-39906

Impermissible access control in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows local attackers to access message information. Affected component: SecTelephonyProvider. Root cause: improper access control. Impact: exposure of message information (local access). Remediation: update to ...

CVE-2022-42541

CVE-2022-42541 is a Remote Code Execution vulnerability associated with Google Chromecast/Android Secure Monitor (AMLogic). Public sources in the connected documents describe a critical impact (CVSS v3.1: 9.8, Network attack vector, no authentication, no user interaction) affecting confidentialit...

CVE-2022-47324

The CVE CVE-2022-47324 involves a missing permission check in a WLAN driver that could lead to local information disclosure. The connected documents reiterate this issue across multiple sources but do not provide concrete details on affected products, versions, or a fix. In the absence of explici...

CVE-2022-47354

CVE-2022-47354 involves a missing permission check in the log service, enabling local denial of service. The connected documents consistently describe the root cause as a lack of privilege validation within the log service, leading to a local impact (DoS) without remote execution. Specific affect...

CVE-2022-47451

CVE-2022-47451 describes a missing parameters check in the WLAN driver that could allow a local denial of service in WLAN services. Multiple connected sources (NVD, Red Hat advisory, CNNVD, CVE listings, and PT security) consistently indicate the issue stems from insufficient validation in the WL...

CVE-2022-47458

CVE-2022-47458 affects the UNISOC chipsets WLAN module (wlan driver) with a vulnerability caused by missing parameter checks. This can lead to local denial of service in the WLAN service. The connected documents confirm the root cause is parameter validation issues and indicate local exploitation...

CVE-2022-48372

CVE-2022-48372 affects the bootcp service in UNISOC chipsets, caused by a missing bounds check that enables an out-of-bounds write. The documented impact is local denial of service with System execution privileges required; attack is local and requires high privileges, with no user interaction. A...

CVE-2023-20630

CVE-2023-20630 affects the USB module on MediaTek chips. Root cause: a missing bounds check causing an out-of-bounds write. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Public exploitation details are not provided in the documents. R...

CVE-2023-20741

CVE-2023-20741 affects the ril module in MediaTek chips, with a missing bounds check causing an out-of-bounds read that can lead to local information disclosure and may enable system-level execution privileges. Exploitation is described as not requiring user interaction, and the patch ID ALPS0762...

CVE-2023-20781

In keyinstall, a memory corruption vulnerability is caused by a missing bounds check, enabling local denial of service with SYSTEM privileges without user interaction. Affects the keyinstall component; exploitation details are not provided beyond the local-privilege context. The issue is associat...

CVE-2023-20800

CVE-2023-20800 affects MediaTek imgsys. The vulnerability is a missing pointer check in the imgsys component that can cause a system crash and enable local escalation of privilege with system execution privileges required. Exploitation requires user interaction. A patch exists (Patch ID: ALPS0742...

CVE-2023-21359

CVE-2023-21359 concerns Bluetooth: an out-of-bounds read due to a missing bounds check could disclose local information via the Bluetooth server. Exploitation requires SYSTEM privileges; no user interaction. Documented in NVD/Red Hat/CNVD entries and Android 14 notes corroborate a Bluetooth infor...

CVE-2023-40645

CVE-2023-40645 concerns a missing permission check in the Messaging component of UNISOC chipsets. The root cause described across sources is an insufficient permission validation that can enable local information disclosure without requiring additional execution privileges. Affected environment i...

CVE-2024-20048

CVE-2024-20048 (flashc) : An uncaught exception in the flashc module can lead to information disclosure with local execution privileges required. The impact is on confidentiality (high) and exploitation is local with no user interaction required. Affected component: flashc. remediation exists: pa...

CVE-2024-20099

CVE-2024-20099: A power-module out-of-bounds write due to a missing bounds check enables local escalation to SYSTEM privileges with no user interaction. A patch is referenced (ALPS08997492; MSV-1625). Affected component is described as the power subsystem; exact product/version details are not sp...

CVE-2024-39434

CVE-2024-39434 concerns UNISOC chipsets where the drm service contains a missing bounds check that enables an out-of-bounds read. This is described as a local denial of service condition with system execution privileges required. The available connected sources consistently report the issue in th...

CVE-2025-20643

CVE-2025-20643 impacts devices using MediaTek chipsets with a DA module vulnerability. A missing bounds check can cause an out-of-bounds read, potentially enabling local information disclosure when an attacker has physical access and already holds System privileges. Exploitation requires user int...

CVE-2025-20668

CVE-2025-20668 affects OpenSSH scp; a missing bounds check allows an out-of-bounds write that could enable local privilege escalation without user interaction. Several sources (including PT-2025-19332 and NVD) describe the issue and cite Patch ID ALPS09625562 and Issue ID MSV-3027, but provided d...

CVE-2026-0012

CVE-2026-0012 affects Android’s ExpandableNotificationRow.java (setHideSensitive) with a logic error causing a local information disclosure of contact names. Exploitation requires no user interaction and grants no privileges beyond local access; the issue is classified as information disclosure (...

CVE-2026-0164

CVE-2026-0164 affects Modem with an out-of-bounds write due to a missing bounds check, enabling remote code execution without extra privileges or user interaction. The vulnerability is classified as RCE with high impact on confidentiality, integrity, and availability. Public sources (NVD/ENISA/NV...

CVE-2011-2343

Technical details about CVE-2011-2343 are not publicly provided in the connected documents. Monitor for updates.

CVE-2013-3666

CVE-2013-3666 affects LG’s Hidden Menu component on Android for the LG Optimus G E973. The vulnerability allows physically proximate attackers to execute shell commands by entering USB Debugging mode and using adb to establish a USB connection, dialing 3845#*973#, navigating to WLAN Test > Wi‑...

CVE-2014-3100

The CVE-2014-3100 issue is a stack-based buffer overflow in Android 4.3’s KeyStore service (encode_key in /system/bin/keystore) that allows arbitrary code execution and may leak sensitive key information or bypass cryptographic operation restrictions when handling an overly long key name. The vul...

CVE-2014-7917

CVE-2014-7917 concerns Android libstagefright’s SampleTable.cpp where an integer overflow exists in the MP4 processing path. Affected software: Android before version 5.0.0, referencing internal bug 15342615. The description notes unspecified impact and attack vectors. There is no explicit remedi...

CVE-2014-9885

CVE-2014-9885 is a format-string vulnerability in the Qualcomm qpnp-adc-tm.c driver (drivers/thermal) used on Nexus 5 devices running Android versions before 2016-08-05. A crafted app can supply format specifiers in a name to escalate privileges. The issue is documented in multiple sources (e.g.,...

CVE-2014-9924

Technical details about CVE-2014-9924 are not provided in the supplied connected documents. Public information appears limited to a Signed to Unsigned Conversion Error in CAF Linux kernel. Monitor for updates.

CVE-2014-9927

Technical details about CVE-2014-9927 are not publicly provided in the connected documents. The entries reiterate a buffer copy issue but do not specify affected product versions, root cause specifics, impact, or available fixes. Monitor for updates from vendors.

CVE-2014-9929

CVE-2014-9929 refers to a Use of Out-of-range Pointer Offset vulnerability in WCDMA for Android CAF builds using the Linux kernel. Public entries describe the root cause as an out-of-range pointer offset (with at least one linked source labeling the issue as a Null pointer dereference). The vulne...

CVE-2015-3871

CVE-2015-3871 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could trigger memory corruption in mediaserver/libstagefright, enabling remote code execution or a denial of service. The Android Security Bulletin notes that builds LMY48T or later address these issues, a...

CVE-2015-3873

CVE-2015-3873 affects libstagefright in Android versions before 5.1.1 LMY48T. The issue is a memory corruption vulnerability in libstagefright triggered by processing a crafted media file, enabling remote code execution or a denial of service. The description references multiple internal bug IDs ...

CVE-2015-8074

CVE-2015-8074 affects Android mediaserver prior to 5.1.1 LMY48X. The vulnerability allows remote attackers to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors, tied to internal bugs 23540907 and 23515142. This entry is distinguished from CVE-2015-661...

CVE-2016-0803

CVE-2016-0803 affects libstagefright in Android mediaserver (Mediaserver) by vulnerable memory allocation in the SoftMPEG4Encoder and SoftVPXEncoder components. A crafted media file can trigger remote code execution or memory corruption. Affected: Android 4.x before 4.4.4; 5.x before 5.1.1 LMY49G...

CVE-2016-0829

The CVE-2016-0829 issue affects Android mediaserver and is triggered in the BnGraphicBufferProducer::onTransact path within libs/gui/IGraphicBufferConsumer.cpp. The root cause is failure to initialize a specific output data structure in Mediaserver, allowing an attacker to read leaked data and by...

CVE-2016-10274

CVE-2016-10274 is an elevation-of-privilege vulnerability in the MediaTek touchscreen driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. The issue is classified as Critical due to the risk of local permanent device compromise, potentially requir...

CVE-2016-10346

CVE-2016-10346 describes an integer overflow in the hypervisor of Qualcomm closed‑source components used in Android CAF/Linux kernel. The vulnerability affects Qualcomm hypervisor code in Android devices, with root cause an integer overflow in the hypervisor. According to the provided data, the i...

CVE-2016-10391

CVE-2016-10391 affects Qualcomm Wconnect in Android CAF builds using the Linux kernel. The root cause is insufficient validation of HCI command length, enabling a remote attacker to trigger unauthorized operations. CVSSv3 is reported as 9.8 (CRITICAL). The issue is discussed in multiple sources; ...

CVE-2016-11041

The CVE-2016-11041 issue affects Samsung mobile devices on KK (Android 4.4). Affected component: the lockscreen handling; root cause: attackers can bypass the lockscreen by sending an AT command over USB. This vulnerability is documented across multiple sources (Red Hat, NVD, CVE List) with consi...

CVE-2016-2419

CVE-2016-2419 affects mediaserver (Android 6.x) where media/libmedia/IDrm.cpp does not initialize a key-request data structure, enabling information disclosure from process memory and bypass of an unspecified protection mechanism via unspecified vectors, with the attack demonstrated by obtaining ...

CVE-2016-3758

CVE-2016-3758 affects Android’s DexClassLoader (libdex/OptInvocation.cpp). The issue is described as multiple buffer overflows that allow attackers to gain privileges via a crafted application providing a long filename. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1...